173c33b050ba228f7897f822d0aff3cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

173c33b050ba228f7897f822d0aff3cb_JaffaCakes118
Size

5KB
MD5

173c33b050ba228f7897f822d0aff3cb
SHA1

a7eb1cfad674071ae4f1a5a53ad106c71273741c
SHA256

ccc03033208e78888c5e0ec6b24e0768c62967e168de6a9a410851bd6bee7c67
SHA512

cc5087c4ff3429c5da65944e5787e178bcf7fb879d5fc10e7e7c959f490991097fa84ebbae6db925f7646b4d8a0fb33a322053ed5c944ab3c7e12ac5491c5b1e
SSDEEP

48:SeXRJBqmtD3UiK/b6o7TQi0MGx5D0UiDJQEg91WiIZWSNEOlSC/glSpLBUrdc2t5:PqmR3UiK/eYAMGDoDc9M3DNiCzLuNqs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173c33b050ba228f7897f822d0aff3cb_JaffaCakes118

Files

173c33b050ba228f7897f822d0aff3cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37997b38acf56b22291072e265127b93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
WinExec
ResetEvent
GetFileAttributesW
GetFileAttributesA
lstrcatA
GetSystemDirectoryA
GetCurrentProcessId
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
CompareStringA

user32

wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
TranslateMessage
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE